User Tools

Site Tools

Table of Contents

Tools

WZCook

It recovers WEP keys from XP's Wireless Zero Configuration utility. This is experimental software, so it may or may not work depending on your Service Pack level.

WZCOOK can also display the PMK (Pairwise Master Key), a 256-bit value which is the result of the passphrase hashed 8192 times together with the ESSID and the ESSID length. The passphrase itself can't be recovered – however, knowing the PMK is enough to connect to a WPA-protected wireless network with wpa_supplicant (see the Windows README). Your wpa_supplicant.conf configuration file should look like:

network={
ssid="my_essid"
pmk=5c9597f3c8245907ea71a89d[...]9d39d08e
}

The WZCook tool also supports a silent mode. This is invoked by adding “--silent” (double dashes) to the command. The program runs and does not output any messages. This is useful for batch files and scripts.

If you don't use WZC service, but you use USR Utility, get this registry value and try it here:

HKey_Current_User/Software/ACXPROFILE/profilename/dot11WEPDefaultKey1

ivstools

This tool handle .ivs files. You can either merge or convert them.

Merge

Use --merge option to merge multiple .ivs files. Example:

ivstools --merge dump1.ivs dump2.ivs dump3.ivs out.ivs

It will merge dump1.ivs, dump2.ivs and dump3.ivs into out.ivs. You can merge more than 2 files, output file must be the last argument.

Note: aircrack-ng is able to open multiple files (pcap or ivs)

Convert

Use --convert option to convert a pcap file (by default, they have .cap extension) to a .ivs file. Example:

ivstools --convert out.cap out.ivs

It will save out.cap IVs to out.ivs

Note: Kismet produce pcap files (the extension is .dump), that can be converted

WARNING: pcap2ivs from aircrack, and aircrack-ng up to v0.2.1 have a bug which creates broken captures. You should not use pcap2ivs from those versions. If you have a broken IVs file from using the broken versions, then try using FixIvs to recover it.

Versuck-ng

versuck-ng's purpose is to calculate the default WEP key for Verizon issued Actiontec wireless routers. It does this using a list of known hardware IDs in the wired mac used by the router. Depending on the BSSID you can some times use it as well. The OUI needs to match on both the wireless and wired mac for use of the BSSID to work.